last executing test programs:

12m36.733382888s ago: executing program 2 (id=735):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x23, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB, @ANYRESDEC])
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)

12m36.323712371s ago: executing program 2 (id=741):
unshare(0x4a000200)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x3, 0xf34}]}, 0x10)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

12m36.230287694s ago: executing program 2 (id=744):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)

12m36.110370628s ago: executing program 2 (id=746):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@numtail}, {@utf8}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

12m35.802961957s ago: executing program 2 (id=751):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x23, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB, @ANYRESDEC])
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)

12m35.520453357s ago: executing program 2 (id=757):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14)
syz_emit_ethernet(0x7a, &(0x7f0000000380)={@remote, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0)

12m35.366046871s ago: executing program 32 (id=757):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14)
syz_emit_ethernet(0x7a, &(0x7f0000000380)={@remote, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0)

12m26.420500306s ago: executing program 5 (id=758):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)

12m26.198382143s ago: executing program 5 (id=828):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil)
chdir(&(0x7f0000000140)='./file1\x00')
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x305982, 0x0)
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000440)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@cruft}, {@map_off}, {}, {@map_acorn}, {@map_off}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@mode={'mode', 0x3d, 0x1ff}}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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")

12m25.911805482s ago: executing program 5 (id=833):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
dup2(r2, r0)

12m10.693105866s ago: executing program 33 (id=833):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
dup2(r2, r0)

6m13.17483797s ago: executing program 1 (id=2740):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000001c0)='./file1\x00')
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
pivot_root(&(0x7f0000000280)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0)
acct(&(0x7f0000000240)='./file0\x00')

6m12.200171702s ago: executing program 1 (id=2765):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
r2 = accept(r1, 0x0, 0x0)
connect$bt_l2cap(r2, 0x0, 0x0)
getpid()
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x1800)

6m11.241789503s ago: executing program 1 (id=2776):
mount$tmpfs(0x0, 0x0, 0x0, 0x20030c5, &(0x7f0000000080)=ANY=[@ANYBLOB='huge'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m10.958163032s ago: executing program 1 (id=2783):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0)
r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

6m10.897994374s ago: executing program 1 (id=2787):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x3a, @local, 0x4e22, 0x3, 'nq\x00', 0x0, 0x8, 0x63}, {@empty, 0x4e24, 0x10000, 0x1, 0x9, 0x2}}, 0x44)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c)
r2 = fcntl$dupfd(r0, 0x406, r0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0)
write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

6m9.45820058s ago: executing program 1 (id=2806):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

6m9.325337364s ago: executing program 34 (id=2806):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

4m2.214201481s ago: executing program 4 (id=3280):
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x10001, 0xfffffffa, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

4m1.381294878s ago: executing program 4 (id=3283):
r0 = socket(0x40000000015, 0x5, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf", 0x63}, {0x0}, {&(0x7f0000000740)}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4m1.102574018s ago: executing program 4 (id=3286):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045035, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000740)={r5, 0x0, 0x0, 0x1, 0x3, 0x800, 0xfffffffe, 0x5, 0x4, 0x401, 0x2, 0x9})
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m59.930910235s ago: executing program 4 (id=3287):
socket$alg(0x26, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x803, 0x0)
pipe2$9p(&(0x7f0000000080), 0x800)
socket$inet6(0xa, 0x1, 0x8010800000000084)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3m59.300481775s ago: executing program 4 (id=3289):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x80)

3m58.103518394s ago: executing program 4 (id=3293):
mmap(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0, 0x13, 0xffffffffffffffff, 0x563be000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x2341411, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x7ff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
creat(0x0, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)

3m41.220641186s ago: executing program 35 (id=3293):
mmap(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0, 0x13, 0xffffffffffffffff, 0x563be000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x2341411, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x7ff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
creat(0x0, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)

19.070713576s ago: executing program 7 (id=4021):
kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd556", 0x93, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d87", 0x28, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x3}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18.445670626s ago: executing program 7 (id=4026):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd29, 0x25dfdbfe, {0x80, 0x10, 0x10, 0x2, 0xfd, 0x0, 0xfd, 0x6, 0x1200}}, 0x1c}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880))
r1 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0)
ftruncate(r1, 0x3)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0))

18.301608161s ago: executing program 7 (id=4029):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700006dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400000008000600", @ANYRES32=r1], 0x5c}, 0x1, 0x400000000000000}, 0x0)

18.198226404s ago: executing program 7 (id=4033):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002880)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@fat=@usefree}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

17.939560673s ago: executing program 7 (id=4040):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
symlinkat(&(0x7f0000000e00)='./cgroup.cpu/cpuset.cpus\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x200, 0x220, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)

17.188888527s ago: executing program 7 (id=4044):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x10, 0x5, 0x7, 0xc1}, 0x50)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'xfrm0\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x8}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20)

16.964247654s ago: executing program 36 (id=4044):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x10, 0x5, 0x7, 0xc1}, 0x50)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'xfrm0\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x8}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20)

7.884742976s ago: executing program 3 (id=4122):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c421fc107500c4417877c7e12400390100c7c724028a000000ff1c2435040000000f4ecb66baa100b00cee028d3bea66450f3880213e41220a48b861000000000000000f23c00f21f84c3500000b000023f8f2653866baf80cb8b428c987ef66bafc0cb843b50000ef", 0x69}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.635052894s ago: executing program 3 (id=4124):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='cmdline\x00')
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x132, r0, 0x6ad42000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020)

6.19442924s ago: executing program 3 (id=4135):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2f, 0x8841}}], 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.115761473s ago: executing program 3 (id=4136):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
mbind(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1, 0x0, 0x5, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

2.655624804s ago: executing program 6 (id=4166):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
socket(0x1, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d042abd70f8ffffffffffffff00", @ANYRES32=r4, @ANYBLOB="0100000000000000240012800900010062"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)

1.942215257s ago: executing program 6 (id=4170):
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x9)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "642c72f67d5441f6e8da020400"}}}}}}}, 0x0)
recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x800)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x3000001d})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

1.939754047s ago: executing program 8 (id=4171):
acct(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd07001000000014"], 0xffe)

1.712908624s ago: executing program 8 (id=4173):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})

1.52520491s ago: executing program 8 (id=4174):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{&(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x2f, 0x0, 0x8, {0x0, @loopback, @private=0xa010101}}}, @ip_retopts={{0x10}}], 0x30}}], 0x2, 0x4040090)

1.493549532s ago: executing program 0 (id=4175):
syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000280)='./file1\x00', 0x200400, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000001fc0)="$eJzs3TFrE2EYB/DHNm1DFzuLw4GLU1An1yAVxIAQuUEnD6pLK8J1OZ3uY/gZ/Eh+jE7dTuzFpq3RpU3f693vB+Ee+BN4XgJ5Mzzvmw8PPx8efDn+1Pz8HuNxFqOIumki9mIjNqN1b/HcOKu346I6AIC7Zj4vpql7YL3KclpsRcTOX0n+I0lDAAAAAAAAAAAAXNuq+f84Nf8PAH1m/r//ynJa7C5+v11m/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABI57Rp7jf/eaXuDwC4efZ/ABge+z8ADI/9HwCG5+2796+ns9n+PMvGESd1lVd5+2zzl69m+0+yM3vLd51UVb55nj9t8+xyvhW7i/zZynw7Hj9q89/ZizezK/lOHKx/+QAAAAAAAAAAAAAAAAAAANAJk+zcyvP9k8m/8ra6cD/AlfP7o3gwurVlAAAAAAAAAAAAAAAAAAAAwJ12/PXbYXF09LEcbvHnXoOu9HPtIp53oo3bLnr0CXahSPzFBAAAAAAAAAAAAAAAAAAAA7Q89Ju6EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/n//+srIqJuWqmXCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTYrwAAAP//gGWXaQ==")
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8080)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

1.434475373s ago: executing program 8 (id=4176):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4)
recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

1.323040547s ago: executing program 9 (id=4046):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, 0x0, 0x109, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2, 0xffffffffffffffff}}, './file0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x284a93})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.2344549s ago: executing program 3 (id=4177):
kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b", 0xc0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217", 0x2a, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x40000)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.126497984s ago: executing program 0 (id=4178):
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
waitid(0x1, r0, 0x0, 0x2, 0x0)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x13)
waitid(0x0, r1, 0x0, 0x2100000a, 0x0)

1.058058146s ago: executing program 9 (id=4179):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, 0x0, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x44010)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r5=>0x0})
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)

1.007918307s ago: executing program 6 (id=4180):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xfe0, &(0x7f0000000800)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfd2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfbe, 0x0, @opaque="3332bc4399c49915656b542019ec116fca25e4e88845a0daffa08cf21c2134c387f43d8b0fc704c923be525a685a0434c4952f0ff2c861ab744859afc4e5c720ca689b76385d253bd382ab2bb358ef33fa8667e32464700182f084bdfe49e6e492390df70cf8293a9c16ad6bf8bf217e72b4eee30f84097c4ab110d11d163ecf78cf577774587e559d55befd4f3a47e0c5e8614813e110dee09e97cc5e8608fde69389ae0ccf6d700360a2db300910b8254f78b7ccf1508b483f8c400a4eee9b78f664068678aa99e74909e2ef9d360fa30f582a110f655b08a51a0c9719dc0a8720d4bbd5bcb5dd6e4ee8b0ef04c9c981f9771b317a9c9c285bce58e2eb23bfd48bd782c84542df54f04addc422bee1fb22e74d65b447a9a293cc3917d0ba999e71205903cbeec16ece7ff52c6c9c1a9a06a68d8e147e75dc44c732acd2e8e3ee7d1ef3badb8a748eea7b41f4e847776bef9e2b5a34a4eef90b8b7896e39f501c45af26f331d748b2de2566bfc2d911d8147aaaa67b1de558e40b6890a48931580070dd561b27e7ebbcc6330b5c85e46ec5fae825230f9e032c20bd0ecd496d5916ba2bdb3cdd661cc3d836092cba90680d0cf96235ec69eb7a1c4d1cad0c5a5995b8bd2c6d733a47aa9a7cb33a13255ba8fb571ea2769c5c36fc153decfdd7846624116995bd41378fbf5b4d15b85a0a609fb2ab6fcc1ac83ce5088dcf99d6038dfc16d0024a2a155dd814e40be1f75fcc07d1ca40b4093b7dc81ce64df0e718df4157e1756700a1a21f8054da39161c70160a223188202cb7df52d8605ed4288d7910e9076bb31e7b363c8a49e37fa7e0df93d6ef28aa1b8599000152da7ba9273337f0f34909594e2ba464a8536975002d376c940bd6e93ed14287f3856106169f8972aa4541a4ab3f74c295d84dc6881062a6b7c69c30456c8a19d27d504c093c32464a5fe221ae58d315fe0144f4c0f9de904c3d6057a080d780ef114cc9760519f28c70887f98e5150c3e2c7e0f4779c74135e9bdec577cb893f2098cf5b3206fb09df814f21a344b5084ccc3c0e6ae38f279739ee0cf5c1de255139eed930fab8118e0cf7b6a1715129e87bf257b45c808218d936aa29ee263d3a659eec4d28d4a74da9c534460b8ba1c5c94f67109526747d06fa6bcaeb69a31e5c137f02bebc6d80ef76f1467cf56a12adfcda0a9ab8a86a4940eecd31828ae09b80b7e62a8d918ce7c9a66635d23bf34d69d917599ec379deb9d268842741f42f1db965931035a557aa46933feae240e2067aca32e9ef01f21856bddeb46ab78c6cae47bcb3d312c5586ab8660736149e940ea359667ea3959edad27eeb7b54e1d89a3e7ed106794ef3f7d0640995a00ea614420ab941072c96d8b0176b9956f857f7f25cfe2691dd47ab28b881418d67851ef9c4593bf3bfc4012d8421999f226d97a128974d0e08f62b806654a9ce67bacfa8d72e16e82cb4a97b733c31ef9e054dd3971357c5bd53e051e511d76f90202e91bf030c11137d2505a9da4b8f3e1fa1b8373e7258908ff6617fccc528bef22d6a2d75b92f2d633551df59ff0782e6dcab679add5b0b9f2e700b8230aa5698412502de88e220afa628249ab14a74db5dee9560f53383e8dbca7dc1dae355e62f2a07c628c7b813184bc0c5f0cf836ade0bd8c3509a43e9cbba868352a2b1fa7aa7852ba66db48db1fac88b34ddcf31074222689b0f493a718528c970a1ec41db7db53811c3e7e2e11bf8d331fbb060000ce9355d9511674ac00c40b92e3360d8fe2cb86a9064d1ae73da55b916923818d21e290f3a15dab99e5ee401adee7e6d358a3d5b2313830e38f86555be8b0f2b2137ffe52f601642fadc471f09d0828cda57ba61f3a482dbabdb2442702eeb52359cb8d29d50352069baa22717bb3c8a85376ed5bc369d85b83f952dff17983318224f03b626d404a6b309326af9eaab292bf9a3b691b5c90c9648bca64942d57a09ba1c22a764f5a1b3d6508a89dbebf31509ee0c3dffa3c73420d02706c4f8ddd67547183ea96995413ae8aecc6d6568c4712d99db22b70d4d1163fe2369e0a52516a89e375ae3f7dd048e8237985860d0e5e279c92b92f5bc6abd9fcfa5a77e8dfaed797e3e7620f6eb2423f22b3a32f6c8475fbd7825298476f8359ae1b895b20fcb3fe8cf8a148b006a47ba90eb72388ccca4c8f0ad2889da38f38678bcdc0690a6aa270b5362329e1564549f4125da88f711b648d65a5665ae1751d884e9d88e4c3f4b5fab843d2cb1a9f54dd5168ec8bc92516162a49b4441597552eda32c846cdeb2522dec1ce95385b9e7310a364937207ac05f87e2e4f8d07047be324c83bf611a7207be2e6da84cc677d4948d15cb3fafdc6a9f8bff559e9a3b84233197628e8c2451239409499f29243f16439f94747b740b48ef30326b859908dd03a1dc3938f992c28f7dcbca86749ef373bdf8d93ddd8318828e4f035d9586edd1c6197652a4e610b7975e0375eecfbf34b6b2a59c868a36e6f7baa78ed037130647628b398922bbace719aa3005894db1586d7fbdaaca42afcfee2988c1d30ddad39c15df4a85c5e1fa7c153551e6621428549e9d18175c456499c5c464ac3a6b382e18890118d29b0f93d1782ad6a192431eb110e9c385e9e64343e21e1ff33f9e02d26d0affc188acf22fc7e28877d087a77061b09b26516297ee84d508790a2b689746bdbb2bcf01eec9630d1215ecbe8753e3e62de2d260ddc72818ad614d6fa32b74c0461541a31700db24c0cb820743992c11ec90c8b1f861275c3c61655745cb48802abe4221ab3c5620c224d6b7686dfef206390b4c24050d6bee98ad9fe0a04e337f36eee308d8ef49989bf7bfc25766067c2a3197be54d87ecc96348bcef15f062bcb71df967704f4490b9433d13dade0866fcd10d54d1420aabe6469e694daa192a7473e4225c1e122b3f3cd5d6531723032309f9a4bcaecd0746cf1a1c2cd13391e3769988bf10ea792f2a297db80ae2aad4993452eb320b088b16d7307709b0e4e96443dfde4cd8058700c32dbc30a33799bb19078a874ce9f088731de7bb522cdc466c6fc8dd60ae2f1f13d2ee01d1811917d1930a1e7e6fa9438fdc2a39f7a5b0f841ad3050d3f3c3a09f2048cd764d169930c9c53b8c7fd4feee5f5fb49fdf97a2c37a258585672aa9c77c09ba8080d933b021b7414530eb8861872dff6a024a6a388ea8ce1f07bbe78cf807ca8c30b364481a304636cca235a4e5e7bc72a00238b26e78917851035d8f04a655a4f1afbb44b2c000dd14cad607d0a3740a315ed88db6bb1a3141e6c6d3324726dba152596319fbb48def47a0d33a01a2792f7c98ea3102a8aac152b1f973e59475a2005f211175c3811bdea552dc154b369d784633d85244c7e71d11eed30a24aedae1e747db6bfb7db6b3c1c22121648d0257407d6d5da9ee6d2c75d25dee6931168325e3c9b513a00662b1019b62ff8ffb321354e816b7899893db2ea0ebc7715543142d7fce124f07eda4cdc6f1f7c98ed8e6bc2c47eec20a874e76f47a686704f6c120acc8760c1509e0333be8e56d3d70f82046528962a4fbd3fea0c590dd97295847ab1033a434ddb51944440c2ce14ae4d455cc7d53eeec176f36a605857f2c22bfc4e33b578fa677b9448ca9008914c96e0914cd232a80405de6c0c4d89ae52019de8d7a04bb1be4d0d8157f194a9083e7f10e943e4c6b44c54a9b69651c48f87e38b8ee720d090fa10f6347502cbffac69161b9533a5e1bb92dbb1db2336e869a051a5defad2dbc7b3b7d234e234dc509a3fa7d26bcf2889815394568b00c50e4391c2ab0343d4692fe2e22fb158d1cada3daa08dd0318b2eb9a644a963946665401b21bf15ae6a0ba6aa9bac5bb986f30bcca618d707b0d189f7942f624af2ed46b493d7b293fb6c5eb0cc94434b6230e98928243c351cb2213db9668754418c2a65d0f90be78bb028d9bd358e906a0578fce42668d47dd56111ba5a427b7bae9a9059fc27edda76cfeb46e51d21f09ce44a68a381396df4c2fe0d29dabdc4eb264a5afd0fb3e2c88be62ac722051eafc1acac82bfa3a7ddd8a2a2afcdaed89d17384561e1820f2aad060e096754fb66f6c9313f756a99134864083900e703ac87923fce1e1166ec5da2c64f100bfc3c561f4c9ed67301efc26159c5a17cb0df0558876c6e5dc6c399b8b274e449f681e7e1c6eb03e637ba7793a3c4fb74ae2e23665cbb6b7583684404dce121aac83fb785e208dd269d3e15ca58758d4201625f07495dcb99c9d2f3ee849786a3c75f4aefa301032865585bc7e1e318692e2ce6fc292e87ed36b71521ccb5989aa92aa2e2ef698ce7152b9bef4b1278a2bee9d38a4beb130da144c659db49322837a8f5885364837663cff137524bdbde429c645a577eac626da9dca76b4a9ad2dd0a3db0acfef9e2b1828d1bc4c2f07b4cc9c0f451e15f74bcec21e4ce84f9b1832e69958b344df8f245d1b38c8d368913bf493220c0e5ed24dda0f164924dc9560dc054b6694e5f6f4dac227a61343125dacad12308babb43d905417ba3552464a2ed9a97d4d7b323105f021dcebdddc72e39d553d4f51388461ebfe4d084f53a408fddba961a872fb02462b60f50a844cd5a15748f369aa1d9bb38197bc2524ca45cdc2d064f5431df0b385635a3d688007b759fd83e4abb64867dc2f6703417d106868af95f121cf05d59ca304affffe946c4a20417f7f2bbd5369ba7ccff96c9b57aa323f2c4df2b3b5b883e9324167d5c896006f77fe2c17fbecc96963e0e2b268d7f93b4c8158fe6960ef29edc5e08700ea9b8e68492d95c4b5052525b80c4c5a41bb9b5dd4a1efddc3f11ff75601dbfc391b221286ec1311798a9af2626f80ab2d5a1fa53e1e7dbad1b3e4f11b47d571b52c51c3027fa33d7e99d6652e0e6867653e2ab61981c7ba8f048522ec17bda32fb7857e7ded1166d0c8423b844bef86a15c93f8e27d0aa26f9e4b788a1c2d2ceabd9a880738d52ebb1c71b4ce59aeda6b44a03378a643b14fdbaf8733152fde4499c641617cb97bead3b7e9a5770e24261a3bf750433f72a41be6a1f623a386241f56fe37b60f43a3becda133eb76f29cd7f2bb53507862eab28e9cd61f5d0ffd76fbcbc97d219c0f20ee25b84616c008a642f5dd83d8961a2e4ffc56af52850bb0680eb802ab0b34ba68c480701ea5f77369ffbb02dc9a85dc9f51145544f118f2fc757211178d926713a361d55a61227152885f760f983637387f1c28b536131820467fcbe8f47f8b6112c1cf22d041a4ba7ceb3b515f799da18b31ca0dbd858b357684eba014a2ceafad55d2b1065664870492caf84a3fb430e37788ef1182bfbb6646bc7c20fb846ae0d9562168838fa3817cd20afcd4ce5f84026af6c10ae6e0646108fa5b6b853df5c151fec94b82150872676ceb58c6a1845c99046361756b647bb22f2dcfac6b3a55ff218f3f95b7d9f949fc3ab498b951fe199cce3b8031acc8ef03fa0a96e7b3672bed2fe0627c3ee9ca30b6ff595e46b5c00d60cd9c8afeac25fba4c5713191697717cb34a1b199ddbdd847be396a68c314dc68c638f2d91b78564654f2ac88cdafbcef23582f4a6825d6c0017ba9650b37ade07191f940b47761ec51af9b2961de818d2f4e54a19f7e354"}}}}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0xffff, 0x4)

790.450564ms ago: executing program 0 (id=4181):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/254)

774.521945ms ago: executing program 6 (id=4182):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x2, 0x70bd2b, 0x25dfdbfd, {0x551ffad94de14fed, 0x1, 0x1, 0xffffffffffffffff, 0x8, 0x6, 0x0, 0xfffffffb, 0x0, 0x2, 0x6}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80)

728.078986ms ago: executing program 0 (id=4183):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})

622.35577ms ago: executing program 6 (id=4184):
kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd556", 0x93, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d87", 0x28, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x3}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

534.714753ms ago: executing program 0 (id=4185):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x9000, 0x6, '9P2000'}, 0x13)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_ATTR(r2, &(0x7f0000002580)={0x78, 0x0, 0x0, {0x1, 0x7, 0x0, {0x4, 0x3, 0x7, 0x2, 0x7, 0x800, 0x8, 0x454, 0xffff3681, 0xa000, 0x10001, 0x0, 0x0, 0x101, 0x5}}}, 0x78)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff6, 0x1000, 0x23, 0x7, 0x0, 0x0, 0x4, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x280cc02, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b)

472.411724ms ago: executing program 9 (id=4186):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x348, 0x206, 0x240, 0x348, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @rand_addr=0x64010102, 0x0, 0x0, 'bridge_slave_1\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1c0, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0xd, 0x3, 0x2d, 0x1f, 0x4, 0x4a0c, 0x9, 0x18, 0x78}, {0xfedb}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x3ff, 0xe, [0xe, 0x36, 0x2e, 0x2e, 0xe, 0x24, 0x28, 0x6, 0x6, 0x22, 0x40, 0x200, 0x26, 0x16, 0x0, 0x22], 0x2, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x7, 0xf5600000, 'pptp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)

378.460527ms ago: executing program 8 (id=4187):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r2, r0, 0x16, 0x0, @void}, 0x10)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000), 0x4)

378.168197ms ago: executing program 0 (id=4188):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf51, 0x81, 0xffff, 0x9cff, 0x15})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff6, 0x0, 0x1, "0062007d82000000000000002240f7ffffff00"})
r1 = syz_open_pts(r0, 0x20200)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17)
ioctl$TCSETAW(r2, 0x5407, &(0x7f00000001c0)={0xf1, 0x7, 0x1, 0xbb, 0xa, "eb69273d86243e1d"})

304.56792ms ago: executing program 9 (id=4189):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, 0x0, 0x109, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2, 0xffffffffffffffff}}, './file0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x284a93})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

275.180031ms ago: executing program 6 (id=4190):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000002000/0x4000)=nil], &(0x7f0000001180), 0x0, 0x0)

186.388754ms ago: executing program 8 (id=4191):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0xd}, 0x1c)

141.148315ms ago: executing program 9 (id=4192):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
wait4(r3, 0x0, 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f0000000640)=r3, 0x12)

0s ago: executing program 3 (id=4193):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0x0, &(0x7f0000001400))
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000019080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
mlock2(&(0x7f00005d3000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x94ed40c3beac78a}, 0x94)
sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

 usb 2-1: no configurations
[  593.925625][T11951] usb 2-1: can't read configurations, error -22
[  593.973454][T13428] loop1: detected capacity change from 0 to 256
[  594.579760][T13454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  595.207881][T13490] loop1: detected capacity change from 0 to 256
[  595.249517][T13490] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  595.303795][T13490] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  595.354948][T13490] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  595.768818][T13508] loop1: detected capacity change from 0 to 512
[  595.805065][T13508] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  595.893061][T13508] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2677: invalid indirect mapped block 4294967295 (level 0)
[  596.012198][T13508] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2677: invalid indirect mapped block 4294967295 (level 1)
[  596.088321][T13508] EXT4-fs (loop1): 1 orphan inode deleted
[  596.116051][T13508] EXT4-fs (loop1): 1 truncate cleaned up
[  596.137916][T13508] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  596.218000][T13508] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.2677: iget: bad extra_isize 46 (inode size 256)
[  596.326424][T13508] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.2677: Invalid inode table block 0 in block_group 0
[  596.536845][T13529] loop1: detected capacity change from 0 to 128
[  596.593526][T13529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  596.669761][T13529] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  599.016857][T13609] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  599.114304][T13609] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  599.185555][T13609] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  599.198430][T11951] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  599.292135][T13609] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  599.306165][T13617] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  599.393333][T13609] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  599.418749][T13609] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  599.442115][T13609] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  599.475543][T13609] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  599.494504][T11951] usb 2-1: Using ep0 maxpacket: 32
[  599.697294][T11951] usb 2-1: unable to get BOS descriptor or descriptor too short
[  600.011861][T11951] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40
[  600.020935][T11951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.043833][T11951] usb 2-1: Product: syz
[  600.053876][T11951] usb 2-1: Manufacturer: syz
[  600.063908][T11951] usb 2-1: SerialNumber: syz
[  600.350577][T13602] kvm: pic: single mode not supported
[  600.350996][T13602] kvm: pic: level sensitive irq not supported
[  600.510063][T11951] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  600.652079][T11951] usb 2-1: USB disconnect, device number 26
[  600.823557][T13663] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  601.910873][T13729] overlayfs: failed to clone upperpath
[  602.037658][T13736] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  602.253653][T13746] device wlan0 left promiscuous mode
[  602.270741][T13746] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.294622][T13746] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.316177][T13746] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.331788][T13746] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.353929][T13746] device ip6gre1 left promiscuous mode
[  602.794376][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2772'.
[  602.933275][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2775'.
[  605.150857][T13861] overlayfs: failed to clone upperpath
[  605.377091][T13875] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  605.394441][ T4459] tipc: Left network mode
[  605.492594][T13871] lo speed is unknown, defaulting to 1000
[  605.492872][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2818'.
[  605.740847][T13871] chnl_net:caif_netlink_parms(): no params data found
[  606.089919][T13871] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.115283][T13871] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.172886][T13871] device bridge_slave_0 entered promiscuous mode
[  606.264191][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  606.264204][   T26] audit: type=1326 audit(1779867929.525:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.0.2827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cd0a21e59 code=0x0
[  606.296296][T13871] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.326290][T13871] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.363272][T13871] device bridge_slave_1 entered promiscuous mode
[  606.393312][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'.
[  606.439613][T13871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.452209][T13871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.521308][T13871] team0: Port device team_slave_0 added
[  606.542695][T13871] team0: Port device team_slave_1 added
[  606.589035][T13871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.604451][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  606.658923][T13871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.700537][T13871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  606.708003][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  606.735602][T13871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.831089][T13948] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  606.876170][T13871] device hsr_slave_0 entered promiscuous mode
[  606.892707][T13871] device hsr_slave_1 entered promiscuous mode
[  606.908281][T13871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  606.925634][T13871] Cannot create hsr debugfs directory
[  607.136908][ T4459] device hsr_slave_0 left promiscuous mode
[  607.143791][ T4459] device hsr_slave_1 left promiscuous mode
[  607.150975][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_0
[  607.187627][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_1
[  607.201726][ T4459] bridge0: port 3(batadv0) entered disabled state
[  607.215739][ T4459] device bridge_slave_1 left promiscuous mode
[  607.230075][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.250991][ T4459] device bridge_slave_0 left promiscuous mode
[  607.261128][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.271707][T13970] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  607.408406][ T4459] bond1 (unregistering): Released all slaves
[  607.565290][ T7541] Bluetooth: hci2: command 0x0409 tx timeout
[  607.596286][ T4459] team0 (unregistering): Port device team_slave_1 removed
[  607.626928][ T4459] team0 (unregistering): Port device team_slave_0 removed
[  607.646566][ T4459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  607.660894][ T4459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  607.720666][ T4459] bond0 (unregistering): Released all slaves
[  607.791603][T13978] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2839'.
[  607.892769][T13991] overlayfs: failed to clone upperpath
[  608.154177][T13871] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  608.228360][T13871] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  608.272767][T13871] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  608.291819][T13871] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  608.535248][T13871] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.674683][T13871] 8021q: adding VLAN 0 to HW filter on device team0
[  608.685848][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  608.699060][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  608.748688][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  608.771308][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  608.820622][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.827815][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  608.842793][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  608.851908][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  608.899131][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.906260][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  608.916762][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  608.948734][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  608.962533][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  608.971835][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  608.986636][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  608.998376][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  609.011632][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  609.036374][T13871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  609.097504][T13871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  609.179208][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  609.209510][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  609.293336][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  609.383582][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  609.495967][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  609.524280][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  609.567207][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'.
[  609.819949][ T7541] Bluetooth: hci2: command 0x041b tx timeout
[  610.834339][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  610.854967][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  610.921099][T13871] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.242017][T14130] tipc: Failed to remove unknown binding: 66,1,1/0:2784162917/2784162919
[  611.368083][T14130] tipc: Failed to remove unknown binding: 66,1,1/0:2784162917/2784162919
[  612.277629][T11955] Bluetooth: hci2: command 0x040f tx timeout
[  612.670536][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  612.707324][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  612.846377][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  612.901581][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  612.970098][T13871] device veth0_vlan entered promiscuous mode
[  612.987260][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  613.055314][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  613.112966][T13871] device veth1_vlan entered promiscuous mode
[  613.257750][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  613.277847][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  613.353223][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  613.551100][   T26] audit: type=1326 audit(1779867936.252:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  613.833428][   T26] audit: type=1326 audit(1779867936.289:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  613.839797][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  613.857964][   T26] audit: type=1326 audit(1779867936.289:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  613.858004][   T26] audit: type=1326 audit(1779867936.289:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  613.858034][   T26] audit: type=1326 audit(1779867936.289:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  613.858062][   T26] audit: type=1326 audit(1779867936.289:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  613.858090][   T26] audit: type=1326 audit(1779867936.289:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  613.858117][   T26] audit: type=1326 audit(1779867936.289:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  614.345676][T13871] device veth0_macvtap entered promiscuous mode
[  616.721878][T11955] Bluetooth: hci2: command 0x0419 tx timeout
[  616.790288][T13871] device veth1_macvtap entered promiscuous mode
[  617.418985][T13871] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.481336][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  617.504119][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  617.554281][T13871] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.581274][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  617.620345][   T26] audit: type=1326 audit(1779867936.289:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  617.638279][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  617.645145][   T26] audit: type=1326 audit(1779867936.289:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.4.2895" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3533324e59 code=0x7ffc0000
[  617.686347][T13871] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.731042][T13871] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.760528][T13871] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.795659][T13871] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.982611][ T4748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.996826][ T4748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.233246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  618.888087][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.925708][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.003478][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  620.216002][T14239] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled
[  620.368726][T14239] ftl_cs: FTL header not found.
[  620.465597][T14253] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  622.511043][T14288] loop7: detected capacity change from 0 to 128
[  622.616295][T14288] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  622.777401][T14288] hpfs: filesystem error: improperly stopped
[  622.857327][T14288] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  623.109082][T14288] hpfs: You really don't want any checks? You are crazy...
[  623.356140][T14288] hpfs: hpfs_map_sector(): read error
[  623.523032][T14288] hpfs: code page support is disabled
[  623.540057][T14288] hpfs: hpfs_map_4sectors(): unaligned read
[  623.557641][T14288] hpfs: hpfs_map_4sectors(): unaligned read
[  623.605210][T14288] hpfs: filesystem error: unable to find root dir
[  623.842110][T14288] hpfs: hpfs_map_4sectors(): unaligned read
[  623.950916][T14325] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  626.724070][T14369] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  626.952294][T14392] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  632.461522][T14465] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  632.549603][T14470] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  634.278579][T14521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2982'.
[  635.362645][T14562] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  635.713548][T14580] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  637.224864][T14600] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  638.347382][T14628] loop7: detected capacity change from 0 to 256
[  639.202183][T14628] FAT-fs (loop7): Directory bread(block 64) failed
[  639.208906][T14628] FAT-fs (loop7): Directory bread(block 65) failed
[  639.266147][T14628] FAT-fs (loop7): Directory bread(block 66) failed
[  639.272777][T14628] FAT-fs (loop7): Directory bread(block 67) failed
[  639.279981][T14628] FAT-fs (loop7): Directory bread(block 68) failed
[  639.295428][T14628] FAT-fs (loop7): Directory bread(block 69) failed
[  639.326086][T14628] FAT-fs (loop7): Directory bread(block 70) failed
[  639.357818][T14628] FAT-fs (loop7): Directory bread(block 71) failed
[  639.365799][T14628] FAT-fs (loop7): Directory bread(block 72) failed
[  639.375757][T14628] FAT-fs (loop7): Directory bread(block 73) failed
[  641.449021][T14664] fuse: root generation should be zero
[  641.504446][T14666] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  641.639585][T14669] loop7: detected capacity change from 0 to 512
[  645.439267][T14738] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  645.532699][T14743] xt_CONNSECMARK: invalid mode: 66
[  647.206214][T14762] binder_alloc: 14761: pid 14761 spamming oneway? 2 buffers allocated for a total size of 5120
[  647.297617][T14762] binder_alloc: 14761: pid 14761 spamming oneway? 3 buffers allocated for a total size of 5128
[  648.569930][T14783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  648.580537][T14783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  648.591381][T14783] device macsec1 entered promiscuous mode
[  648.597351][T14783] device batadv_slave_0 entered promiscuous mode
[  650.141938][T14812] IPVS: Error connecting to the multicast addr
[  650.456843][T14821] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  652.293614][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  652.302593][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  654.172288][T14853] virtio-fs: tag </dev/md0> not found
[  656.168775][T14908] IPVS: Error connecting to the multicast addr
[  657.354833][T14923] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  657.362074][T14923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  657.561693][T14923] vhci_hcd vhci_hcd.0: Device attached
[  658.409620][T14928] vhci_hcd: connection closed
[  658.417684][    T9] vhci_hcd: stop threads
[  658.596787][    T9] vhci_hcd: release socket
[  658.719873][ T7548] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[  658.788367][    T9] vhci_hcd: disconnect device
[  659.720374][T14951] IPVS: Error connecting to the multicast addr
[  659.831081][T14958] loop7: detected capacity change from 0 to 1024
[  669.919231][T15003] netlink: 'syz.6.3092': attribute type 29 has an invalid length.
[  669.927122][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3092'.
[  669.959449][T15003] netlink: 'syz.6.3092': attribute type 29 has an invalid length.
[  669.967398][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3092'.
[  670.032557][ T7548] vhci_hcd: vhci_device speed not set
[  672.863916][T15058] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  679.023681][T15137] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  679.074532][T15135] tipc: Started in network mode
[  679.079448][T15135] tipc: Node identity 3ea1417a8eae, cluster identity 4711
[  679.142196][T15135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  679.197874][T15135] tipc: Resetting bearer <eth:syzkaller0>
[  679.553545][T15133] tipc: Disabling bearer <eth:syzkaller0>
[  682.003743][T11957] tipc: Node number set to 2953789818
[  682.812408][T15196] loop2: detected capacity change from 0 to 7
[  682.837787][T15196] Dev loop2: unable to read RDB block 7
[  682.843610][T15196]  loop2: AHDI p1 p2 p3
[  682.848034][T15196] loop2: partition table partially beyond EOD, truncated
[  682.859127][T15196] loop2: p1 start 1601398130 is beyond EOD, truncated
[  682.866276][T15196] loop2: p2 start 1702059890 is beyond EOD, truncated
[  683.641824][T15205] device syzkaller0 entered promiscuous mode
[  691.072900][T15304] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  693.143724][T15334] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  693.218255][T15340] device syzkaller0 entered promiscuous mode
[  693.242168][T15340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  693.251130][T15339] tipc: Resetting bearer <eth:syzkaller0>
[  693.271719][T15339] tipc: Disabling bearer <eth:syzkaller0>
[  703.874372][ T7543] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  704.655563][T15431] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  704.693312][ T7543] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  704.725488][ T7543] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  704.756975][ T7543] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.815946][ T7543] usb 8-1: config 0 descriptor??
[  704.875019][ T7543] pwc: Askey VC010 type 2 USB webcam detected.
[  705.343844][ T7543] pwc: recv_control_msg error -32 req 02 val 2b00
[  705.430562][ T7543] pwc: recv_control_msg error -32 req 02 val 2700
[  705.485218][ T7543] pwc: recv_control_msg error -32 req 02 val 2c00
[  705.562102][ T7543] pwc: recv_control_msg error -32 req 04 val 1000
[  705.634159][ T7543] pwc: recv_control_msg error -32 req 04 val 1300
[  705.755394][ T7543] pwc: recv_control_msg error -32 req 04 val 1400
[  705.798720][ T7543] pwc: recv_control_msg error -32 req 02 val 2000
[  705.974624][ T7543] pwc: recv_control_msg error -32 req 02 val 2100
[  706.059220][ T7543] pwc: recv_control_msg error -32 req 04 val 1500
[  706.134849][ T7543] pwc: recv_control_msg error -32 req 02 val 2500
[  706.178279][ T7543] pwc: recv_control_msg error -32 req 02 val 2400
[  706.232525][ T7543] pwc: recv_control_msg error -32 req 02 val 2600
[  706.308389][ T7543] pwc: recv_control_msg error -32 req 02 val 2900
[  706.606097][ T7543] pwc: recv_control_msg error -71 req 04 val 1100
[  706.841698][ T7543] pwc: recv_control_msg error -71 req 04 val 1200
[  707.527246][ T7543] pwc: Registered as video103.
[  707.550812][ T7543] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input10
[  708.092482][ T7543] usb 8-1: USB disconnect, device number 2
[  708.878676][T15455] batman_adv: batadv0: Removing interface: macvtap1
[  710.827184][T15516] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001
[  713.806216][T15554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  713.817680][T15554] device syzkaller0 entered promiscuous mode
[  713.847298][T15554] tipc: Resetting bearer <eth:syzkaller0>
[  713.858677][T15553] tipc: Resetting bearer <eth:syzkaller0>
[  713.893755][T15553] tipc: Disabling bearer <eth:syzkaller0>
[  715.412771][T15597] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  718.651141][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  718.658509][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  727.998053][T15756] futex_wake_op: syz.0.3271 tries to shift op by 144; fix this program
[  737.377442][T11957] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  737.404808][T11957] Bluetooth: hci0: Injecting HCI hardware error event
[  737.520645][ T4206] Bluetooth: hci0: hardware error 0x00
[  739.355652][T15870] overlayfs: failed to clone upperpath
[  746.062359][T15912] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3313'.
[  748.843530][T15941] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  760.534109][T16020] lo speed is unknown, defaulting to 1000
[  762.142451][ T7543] Bluetooth: hci5: command 0x0409 tx timeout
[  763.644627][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3346'.
[  763.783497][T16057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3346'.
[  763.818242][T16057] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3346'.
[  763.836358][T16057] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3346'.
[  764.485168][ T4366] Bluetooth: hci5: command 0x041b tx timeout
[  764.748463][T16020] chnl_net:caif_netlink_parms(): no params data found
[  764.758805][   T26] kauditd_printk_skb: 28 callbacks suppressed
[  764.758818][   T26] audit: type=1326 audit(1779868076.531:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  764.958449][   T26] audit: type=1326 audit(1779868076.531:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  765.113362][   T26] audit: type=1326 audit(1779868076.559:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  765.138978][   T26] audit: type=1326 audit(1779868076.559:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  765.194614][T16020] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.219390][T16020] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.241718][   T26] audit: type=1326 audit(1779868076.559:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  765.286829][T16099] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3354'.
[  765.355908][T16020] device bridge_slave_0 entered promiscuous mode
[  765.567682][T16020] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.675321][T16020] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.687398][   T26] audit: type=1326 audit(1779868076.559:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  765.873298][T16020] device bridge_slave_1 entered promiscuous mode
[  766.039495][   T26] audit: type=1326 audit(1779868076.559:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  766.086976][   T26] audit: type=1326 audit(1779868076.559:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6a9b1968e code=0x7ffc0000
[  766.112541][   T26] audit: type=1326 audit(1779868076.559:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  766.141148][   T26] audit: type=1326 audit(1779868076.568:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16073 comm="syz.6.3351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a9b58e59 code=0x7ffc0000
[  766.257186][T16020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  766.257835][T16107] overlayfs: failed to clone upperpath
[  766.307829][T16020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  766.653119][T16020] team0: Port device team_slave_0 added
[  766.994796][ T4366] Bluetooth: hci5: command 0x040f tx timeout
[  767.005590][T16020] team0: Port device team_slave_1 added
[  767.640223][T16020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  767.661885][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  767.723525][T16127] loop7: detected capacity change from 0 to 512
[  767.832443][T16020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  767.987762][T16020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  768.091601][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  768.283574][T16020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  768.491678][T16020] device hsr_slave_0 entered promiscuous mode
[  768.533679][T16020] device hsr_slave_1 entered promiscuous mode
[  768.572515][T16020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  768.617461][T16020] Cannot create hsr debugfs directory
[  768.646807][T16125] loop7: detected capacity change from 0 to 131072
[  768.718910][T16125] F2FS-fs (loop7): invalid crc value
[  768.744533][T16125] F2FS-fs (loop7): Found nat_bits in checkpoint
[  768.785607][T16125] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2
[  768.797531][T16125] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  769.418483][ T4366] Bluetooth: hci5: command 0x0419 tx timeout
[  770.876209][T16020] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  772.269699][T16020] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  772.613916][T16020] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  772.772915][T16020] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  772.891541][ T4473] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.059933][ T4473] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.466650][T16020] 8021q: adding VLAN 0 to HW filter on device bond0
[  775.251845][T16020] 8021q: adding VLAN 0 to HW filter on device team0
[  775.812211][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  775.821496][T16192] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  775.831609][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  775.866955][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  775.896604][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  775.932364][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.939547][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.959258][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  775.975136][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  775.984609][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.991737][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  776.009412][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  776.019431][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  776.060324][ T4473] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.113538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  776.312438][ T4473] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.467623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  777.523002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  777.538045][   T26] kauditd_printk_skb: 68 callbacks suppressed
[  777.538060][   T26] audit: type=1804 audit(1779868088.472:237): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3380" name="bus" dev="ramfs" ino=63816 res=1 errno=0
[  777.558796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  778.624610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  778.644400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  778.652972][   T26] audit: type=1804 audit(1779868088.518:238): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3380" name="bus" dev="ramfs" ino=63816 res=1 errno=0
[  778.694160][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  778.718195][T16020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  778.778557][T16020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  778.878548][T16225] overlayfs: failed to clone upperpath
[  779.368002][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  779.895905][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  779.943101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  781.193730][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  781.204089][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  781.220490][T16020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  782.367284][T16267] overlayfs: failed to clone upperpath
[  782.379038][T16267] 9pnet: Insufficient options for proto=fd
[  784.914222][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  784.923603][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  784.981743][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  785.002112][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  785.169821][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  785.216518][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  785.268791][T16020] device veth0_vlan entered promiscuous mode
[  785.313427][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  785.379256][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  785.476848][T16020] device veth1_vlan entered promiscuous mode
[  785.723766][T16302] VFS: Mount too revealing
[  787.185666][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  787.423732][ T4473] device veth0_to_bond left promiscuous mode
[  787.527676][T16313] overlayfs: failed to clone upperpath
[  787.581239][ T4473] bridge1: port 1(veth0_to_bond) entered disabled state
[  788.965185][ T4473] device hsr_slave_0 left promiscuous mode
[  789.053815][ T4473] device hsr_slave_1 left promiscuous mode
[  789.078402][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_0
[  789.188758][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1
[  789.261956][ T4473] batman_adv: batadv0: Removing interface: vlan2
[  789.274815][T16331] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  789.347567][ T4473] bridge0: port 3(batadv0) entered disabled state
[  789.375391][ T4473] device bridge_slave_1 left promiscuous mode
[  789.381925][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.398940][ T4473] device bridge_slave_0 left promiscuous mode
[  789.405386][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state
[  789.495933][ T4473] bond1 (unregistering): (slave geneve2): Releasing active interface
[  789.542097][ T4473] bond1 (unregistering): Released all slaves
[  789.862923][T16347] overlayfs: failed to clone upperpath
[  790.332943][ T4473] team0 (unregistering): Port device team_slave_1 removed
[  791.366939][ T4473] team0 (unregistering): Port device team_slave_0 removed
[  791.444481][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  791.496017][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  792.466330][ T4473] bond0 (unregistering): Released all slaves
[  792.600418][T16352] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  792.609307][T16352] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  792.618343][T16352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  792.627140][T16352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  792.635956][T16352] device geneve3 entered promiscuous mode
[  792.740303][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  792.761126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  792.918354][T16020] device veth0_macvtap entered promiscuous mode
[  793.013115][T16370] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3411'.
[  793.489148][T16370] bond0: (slave bond_slave_0): Releasing backup interface
[  793.974513][T16370] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  794.057338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  794.145341][T16020] device veth1_macvtap entered promiscuous mode
[  794.305258][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  794.919225][T16382] overlayfs: missing 'lowerdir'
[  795.352640][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  795.546325][T16020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  795.554541][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  795.567156][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  796.179093][T16020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  796.263071][T16020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.487970][T16020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  796.497646][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  796.510360][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  796.523451][T16020] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  796.542794][T16020] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  796.552238][T16020] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  796.575169][T16020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  796.898774][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  796.951114][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  797.003131][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  798.703434][ T1223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  798.718181][ T1223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.725881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  803.175834][ T7548] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  803.249945][ T7548] Bluetooth: hci2: Injecting HCI hardware error event
[  803.293461][ T4200] Bluetooth: hci2: hardware error 0x00
[  806.658351][T16483] loop8: detected capacity change from 0 to 512
[  807.358001][T16487] loop7: detected capacity change from 0 to 2048
[  807.618166][T16483] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  808.394332][T16483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  808.431101][T16483] System zones: 1-12
[  808.458012][T16501] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  808.696062][T16483] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  809.586693][T16483] EXT4-fs (loop8): 1 truncate cleaned up
[  809.592391][T16483] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000d,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,debug,data=journal,,errors=continue. Quota mode: none.
[  809.701687][T16530] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  811.715593][T16562] device syzkaller0 entered promiscuous mode
[  813.363714][   T26] audit: type=1326 audit(1779868122.011:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  814.218510][   T26] audit: type=1326 audit(1779868122.011:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  817.059215][   T26] audit: type=1326 audit(1779868122.039:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  817.244864][   T26] audit: type=1326 audit(1779868122.039:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  817.293765][   T26] audit: type=1326 audit(1779868122.039:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  817.350935][   T26] audit: type=1326 audit(1779868122.048:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  817.477662][   T26] audit: type=1326 audit(1779868122.048:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  817.556513][   T26] audit: type=1326 audit(1779868122.048:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16601 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe45f5b468e code=0x7ffc0000
[  817.615434][   T26] audit: type=1326 audit(1779868122.048:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  817.641426][   T26] audit: type=1326 audit(1779868122.048:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.3457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45f5f3e59 code=0x7ffc0000
[  818.051292][T16642] loop8: detected capacity change from 0 to 8192
[  818.483560][T16642] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  819.316561][T16660] loop8: detected capacity change from 0 to 32768
[  819.654965][T16660] XFS (loop8): Mounting V5 Filesystem
[  819.692220][T16660] XFS (loop8): Ending clean mount
[  819.736371][T16660] XFS (loop8): Quotacheck needed: Please wait.
[  819.849590][T16660] XFS (loop8): Quotacheck: Done.
[  822.256864][T16020] XFS (loop8): Unmounting Filesystem
[  823.714805][T16721] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002
[  825.050954][T16728] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  825.430233][T16732] syz.7.3482 (16732) used greatest stack depth: 18512 bytes left
[  827.253661][T16760] loop8: detected capacity change from 0 to 32768
[  827.362559][T16760] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.3493 (16760)
[  827.982710][T16772] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  827.995903][T16760] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  828.004728][T16760] BTRFS info (device loop8): enabling auto defrag
[  828.011320][T16760] BTRFS info (device loop8): max_inline at 4096
[  828.017651][T16760] BTRFS info (device loop8): using free space tree
[  828.024505][T16760] BTRFS info (device loop8): has skinny extents
[  828.814132][T16783] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3497'.
[  828.835977][T16783] bond0: (slave bond_slave_0): Releasing backup interface
[  828.846615][T16783] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  828.925676][T16760] BTRFS info (device loop8): enabling ssd optimizations
[  830.276370][T16821] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  830.694417][T16829] loop7: detected capacity change from 0 to 16
[  830.863709][T16829] erofs: (device loop7): mounted with root inode @ nid 36.
[  833.397794][T16854] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  834.682828][T16875] loop7: detected capacity change from 0 to 1024
[  835.786228][T16894] loop8: detected capacity change from 0 to 1024
[  835.879902][T16900] loop7: detected capacity change from 0 to 512
[  836.137680][T16900] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  836.783261][T16900] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3516: invalid indirect mapped block 9 (level 0)
[  837.088145][T16900] EXT4-fs (loop7): 1 truncate cleaned up
[  837.322423][T16900] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  837.667046][T16928] loop8: detected capacity change from 0 to 16
[  838.194559][T16928] erofs: (device loop8): mounted with root inode @ nid 36.
[  840.433500][T16955] loop7: detected capacity change from 0 to 1024
[  842.815107][T16983] loop8: detected capacity change from 0 to 512
[  843.505526][T16983] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  843.728361][T16983] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3533: invalid indirect mapped block 9 (level 0)
[  843.844406][T16983] EXT4-fs (loop8): 1 truncate cleaned up
[  843.897863][T16983] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  846.387475][T17030] loop7: detected capacity change from 0 to 512
[  846.714881][T17030] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  847.179541][T17030] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3545: invalid indirect mapped block 9 (level 0)
[  847.593192][T17030] EXT4-fs (loop7): 1 truncate cleaned up
[  847.649565][T17030] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  850.063844][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  850.073172][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  850.377309][T17083] loop8: detected capacity change from 0 to 512
[  850.441562][T17083] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  850.632292][T17083] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3555: invalid indirect mapped block 9 (level 0)
[  851.050859][T17083] EXT4-fs (loop8): 1 truncate cleaned up
[  851.172334][T17083] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  853.433655][T17119] loop7: detected capacity change from 0 to 1024
[  854.534568][T17132] loop8: detected capacity change from 0 to 512
[  855.007261][T17132] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  855.593021][T17132] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3565: invalid indirect mapped block 9 (level 0)
[  855.854217][T17132] EXT4-fs (loop8): 1 truncate cleaned up
[  856.131820][T17132] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  859.307219][T17205] loop7: detected capacity change from 0 to 512
[  859.385592][T17205] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  859.863393][T17205] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3578: invalid indirect mapped block 9 (level 0)
[  859.873994][T17216] loop8: detected capacity change from 0 to 512
[  859.883066][T17205] EXT4-fs (loop7): 1 truncate cleaned up
[  859.889933][T17205] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  859.904749][T17216] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  860.390752][T17216] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3582: invalid indirect mapped block 9 (level 0)
[  860.617160][T17216] EXT4-fs (loop8): 1 truncate cleaned up
[  861.307915][T17216] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  864.989513][T17280] loop7: detected capacity change from 0 to 512
[  865.040482][T17280] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  865.097578][T17280] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3597: invalid indirect mapped block 9 (level 0)
[  865.140730][T17280] EXT4-fs (loop7): 1 truncate cleaned up
[  865.168143][T17280] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  865.275260][T17288] loop8: detected capacity change from 0 to 512
[  865.303082][T17288] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  865.454414][T17289] lo speed is unknown, defaulting to 1000
[  865.478198][T17288] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3598: invalid indirect mapped block 9 (level 0)
[  865.705139][T17288] EXT4-fs (loop8): 1 truncate cleaned up
[  865.722049][T17288] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  865.775155][ T1223] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  866.159876][ T1223] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  866.316879][ T1223] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  866.439230][ T1223] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  867.190321][T17319] loop7: detected capacity change from 0 to 16
[  867.204272][T17319] erofs: (device loop7): mounted with root inode @ nid 36.
[  867.337847][T17289] chnl_net:caif_netlink_parms(): no params data found
[  867.363178][T17324] loop8: detected capacity change from 0 to 512
[  867.413471][T17324] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  867.472045][T17324] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3605: invalid indirect mapped block 9 (level 0)
[  867.485558][T16870] Bluetooth: hci0: command 0x0409 tx timeout
[  867.508091][T17327] loop7: detected capacity change from 0 to 512
[  867.514744][T17324] EXT4-fs (loop8): 1 truncate cleaned up
[  867.610395][T17324] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  867.671886][ T1223] tipc: Disabling bearer <eth:syzkaller0>
[  867.713466][T17327] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  867.901505][T17327] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3604: invalid indirect mapped block 9 (level 0)
[  867.920096][T17327] EXT4-fs (loop7): 1 truncate cleaned up
[  867.927154][T17327] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  867.954118][ T1223] tipc: Left network mode
[  867.986907][T17289] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.994781][T17289] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.465809][T17289] device bridge_slave_0 entered promiscuous mode
[  868.488116][T17289] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.667985][T17289] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.676777][T17289] device bridge_slave_1 entered promiscuous mode
[  868.885516][T17289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  869.502686][T17365] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3609'.
[  869.571711][T17289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  869.786272][ T7541] Bluetooth: hci0: command 0x041b tx timeout
[  870.107716][T17374] loop7: detected capacity change from 0 to 16
[  870.315548][T17289] team0: Port device team_slave_0 added
[  870.324895][T17289] team0: Port device team_slave_1 added
[  870.355619][T17374] erofs: (device loop7): mounted with root inode @ nid 36.
[  870.512195][T17289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  870.526104][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  870.638115][T17386] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3614'.
[  870.876633][T17289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.167971][T17289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.194171][T17289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  871.372696][T17289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  871.567099][T17390] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3616'.
[  871.659477][T17289] device hsr_slave_0 entered promiscuous mode
[  871.727748][T17289] device hsr_slave_1 entered promiscuous mode
[  871.816034][T17400] loop8: detected capacity change from 0 to 1024
[  872.013820][ T7541] Bluetooth: hci0: command 0x040f tx timeout
[  872.651048][T17410] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3620'.
[  874.236536][ T4366] Bluetooth: hci0: command 0x0419 tx timeout
[  875.754573][T17429] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3624'.
[  877.342653][T17457] loop7: detected capacity change from 0 to 1024
[  879.910428][T17473] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3635'.
[  880.255044][T17474] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3634'.
[  880.350534][T17470] loop8: detected capacity change from 0 to 512
[  880.413145][T17470] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  880.463685][ T1223] device hsr_slave_0 left promiscuous mode
[  880.472168][T17470] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3633: invalid indirect mapped block 9 (level 0)
[  880.489044][T17470] EXT4-fs (loop8): 1 truncate cleaned up
[  880.494865][ T1223] device hsr_slave_1 left promiscuous mode
[  880.516206][T17470] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  880.619962][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_0
[  880.638984][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_1
[  881.455324][T17493] loop7: detected capacity change from 0 to 1024
[  882.897025][ T1223] team0 (unregistering): Port device team_slave_1 removed
[  883.338780][T17499] loop8: detected capacity change from 0 to 1024
[  883.967331][ T1223] team0 (unregistering): Port device team_slave_0 removed
[  886.091929][ T1223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  886.164202][ T1223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  886.449407][T17509] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3642'.
[  887.196812][ T1223] bond0 (unregistering): Released all slaves
[  887.206187][T17511] loop7: detected capacity change from 0 to 1024
[  890.529143][ T7541] Bluetooth: hci5: command 0x0406 tx timeout
[  890.675550][T17525] loop8: detected capacity change from 0 to 512
[  890.864845][T17525] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  891.045529][T17525] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3647: invalid indirect mapped block 9 (level 0)
[  891.092596][T17525] EXT4-fs (loop8): 1 truncate cleaned up
[  891.136610][T17525] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  891.352571][T17289] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  891.600726][T17553] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3650'.
[  891.939254][T17289] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  892.022423][T17289] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  892.033519][T17289] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  892.394031][T17563] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  892.410913][T17289] 8021q: adding VLAN 0 to HW filter on device bond0
[  892.547593][T17565] loop8: detected capacity change from 0 to 512
[  892.554897][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  892.565519][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  892.783420][T17565] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  893.203588][T17289] 8021q: adding VLAN 0 to HW filter on device team0
[  893.300674][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  893.309373][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  893.470485][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[  893.477673][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  893.677196][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  893.702799][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  893.884836][T17577] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3654'.
[  894.241709][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.248894][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  894.256894][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  894.287992][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  894.412725][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  894.441804][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  894.595540][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  894.611173][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  894.636466][T17582] loop7: detected capacity change from 0 to 16
[  894.666737][T17582] erofs: (device loop7): mounted with root inode @ nid 36.
[  894.675809][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  895.470303][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  895.589717][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  895.605171][T17591] loop8: detected capacity change from 0 to 1024
[  895.662574][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  895.700248][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  895.736706][T17594] loop7: detected capacity change from 0 to 1024
[  895.750970][T17289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  895.796504][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  898.221739][T17603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3660'.
[  898.992055][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  899.012984][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  899.038325][T17289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  899.154003][T17623] loop8: detected capacity change from 0 to 512
[  899.218551][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  899.261253][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  899.294282][T17629] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3661'.
[  899.536588][T17623] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  899.769712][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  899.791827][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  899.889625][T17634] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3663'.
[  900.082905][T17623] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3662: invalid indirect mapped block 9 (level 0)
[  900.227445][T17289] device veth0_vlan entered promiscuous mode
[  900.247475][T17623] EXT4-fs (loop8): 1 truncate cleaned up
[  900.279431][T17623] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  900.283266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  900.345891][T17623] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #2: block 13: comm syz.8.3662: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  900.374190][T17636] loop7: detected capacity change from 0 to 1024
[  900.419725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  900.578497][T17289] device veth1_vlan entered promiscuous mode
[  901.871699][T17644] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #2: block 13: comm syz.8.3662: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  902.371467][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  902.449580][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  902.617112][T17289] device veth0_macvtap entered promiscuous mode
[  902.854807][T17289] device veth1_macvtap entered promiscuous mode
[  902.952186][T17655] loop8: detected capacity change from 0 to 16
[  903.137292][T17655] erofs: (device loop8): mounted with root inode @ nid 36.
[  903.492478][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  903.637602][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  903.680907][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  903.693560][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  903.708483][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  903.723869][T17289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  903.731842][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  903.741673][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  903.825487][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  903.853809][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  903.892757][T17289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  903.918936][T17289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  905.290634][T17664] loop7: detected capacity change from 0 to 1024
[  905.299830][T17289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  905.330516][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  905.387181][T17672] loop8: detected capacity change from 0 to 512
[  905.388157][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  905.440634][T17289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  905.449366][T17289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  905.536276][T17672] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  907.050828][T17289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.059841][T17289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  907.804593][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  908.511798][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.693407][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  908.717771][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  908.742583][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.784273][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  908.808135][T17698] loop7: detected capacity change from 0 to 512
[  908.947223][T17698] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  908.982148][T17702] loop3: detected capacity change from 0 to 512
[  909.022563][T17702] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  909.234455][T17702] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3596: invalid indirect mapped block 9 (level 0)
[  910.012069][T17702] EXT4-fs (loop3): 1 truncate cleaned up
[  910.029889][T17702] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  913.999333][T16869] Bluetooth: hci1: command 0x0409 tx timeout
[  914.140012][T17749] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  914.852999][T17723] chnl_net:caif_netlink_parms(): no params data found
[  916.354292][T16869] Bluetooth: hci1: command 0x041b tx timeout
[  916.382945][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  916.389286][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  916.463353][T17772] loop8: detected capacity change from 0 to 1024
[  916.532025][T17780] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  918.207961][T17799] loop7: detected capacity change from 0 to 1024
[  918.262670][T17723] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.530298][T11955] Bluetooth: hci1: command 0x040f tx timeout
[  918.539378][T17802] loop3: detected capacity change from 0 to 1024
[  918.549944][T17723] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.611748][T17723] device bridge_slave_0 entered promiscuous mode
[  921.051288][T17723] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.058819][T17723] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.067244][T17723] device bridge_slave_1 entered promiscuous mode
[  922.604484][T16869] Bluetooth: hci1: command 0x0419 tx timeout
[  922.664126][T17723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  922.892368][T17723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  922.953336][T17723] team0: Port device team_slave_0 added
[  922.963230][T17723] team0: Port device team_slave_1 added
[  923.009004][T17723] batman_adv: batadv0: Adding interface: batadv_slave_0
[  923.026850][T17723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.070450][T17723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  923.150120][T17833] binder: 17831:17833 ioctl c0306201 200000000080 returned -14
[  923.189035][T17833] binder: 17831:17833 ioctl c0306201 2000000003c0 returned -14
[  923.209407][T17723] batman_adv: batadv0: Adding interface: batadv_slave_1
[  923.229359][T17723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.282422][T17723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  923.324683][T17845] ªªªªªª: renamed from lo
[  923.445353][T17847] device syzkaller1 entered promiscuous mode
[  923.527669][T17723] device hsr_slave_0 entered promiscuous mode
[  923.556151][T17723] device hsr_slave_1 entered promiscuous mode
[  923.562864][T17723] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  923.571185][T17723] Cannot create hsr debugfs directory
[  924.387903][T17892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3719'.
[  924.436060][T17892] batman_adv: batadv0: Removing interface: batadv_slave_1
[  924.691764][ T1223] device bond0 left promiscuous mode
[  924.697359][ T1223] device bond_slave_0 left promiscuous mode
[  924.730579][ T1223] device bond_slave_1 left promiscuous mode
[  924.778056][ T1223] device batadv0 left promiscuous mode
[  924.809345][ T1223] device hsr_slave_0 left promiscuous mode
[  924.841891][ T1223] device hsr_slave_1 left promiscuous mode
[  924.860880][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_0
[  924.885560][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_1
[  924.901352][ T1223] batman_adv: batadv0: Removing interface: vlan1
[  925.119013][ T1223] team0 (unregistering): Port device team_slave_1 removed
[  925.151913][ T1223] team0 (unregistering): Port device team_slave_0 removed
[  925.193905][ T1223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  925.227949][ T1223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  925.395170][ T1223] bond0 (unregistering): Released all slaves
[  925.526006][T17937] kvm [17936]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x69c8
[  925.661195][T17945] device bridge_slave_0 left promiscuous mode
[  925.674535][T17945] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.714203][T17723] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  925.764992][T17723] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  925.798643][T17723] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  925.821894][T17723] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  925.849674][   T26] kauditd_printk_skb: 58 callbacks suppressed
[  925.849689][   T26] audit: type=1804 audit(1779868227.269:307): pid=17952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3734" name="/newroot/153/bus/file0" dev="overlay" ino=845 res=1 errno=0
[  926.079715][T17723] 8021q: adding VLAN 0 to HW filter on device bond0
[  926.139712][T17723] 8021q: adding VLAN 0 to HW filter on device team0
[  926.169144][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  926.181904][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  926.240748][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  926.250192][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  926.314942][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.322107][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  926.373498][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  926.393450][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  926.402540][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  926.411347][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.418492][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  926.429646][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  926.450603][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  926.523059][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  926.593226][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  926.642051][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  926.666316][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  926.702302][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  926.719912][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  926.734201][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  926.810901][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  926.841815][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  926.870578][T17990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  926.878812][T17990] IPv6: NLM_F_CREATE should be set when creating new route
[  926.899893][T17723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  927.608851][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  927.640027][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  927.680814][T17723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  927.817777][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  927.838778][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  927.915987][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  927.932079][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  927.960992][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  927.978393][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  927.991573][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3761'.
[  928.039203][T17723] device veth0_vlan entered promiscuous mode
[  928.059885][T17723] device veth1_vlan entered promiscuous mode
[  928.196957][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  928.217811][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  928.243418][T17723] device veth0_macvtap entered promiscuous mode
[  928.257408][T18062] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer.
[  928.286909][T17723] device veth1_macvtap entered promiscuous mode
[  928.311108][T18062] kvm [18061]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[  928.323000][T17723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.334395][T18062] kvm [18061]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[  928.344296][T17723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.358291][T17723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.371123][T18062] APIC base relocation is unsupported by KVM
[  928.388371][T17723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.410830][T17723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.428982][T17723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.460634][T17723] batman_adv: batadv0: Interface activated: batadv_slave_0
[  928.498498][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  928.513126][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  928.544002][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  928.589672][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  928.603248][T17723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.617493][T17723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.636042][T17723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.647816][T17723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.663008][T17723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.676573][T17723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.692375][T17723] batman_adv: batadv0: Interface activated: batadv_slave_1
[  928.712116][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  928.713379][T18071] kvm [18070]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5923
[  928.741143][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  928.772509][T18071] kvm [18070]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5923
[  928.792830][T17723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  928.802952][T17723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  928.811903][T17723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  928.821661][T17723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  928.835428][T18074] netlink: 'syz.8.3768': attribute type 1 has an invalid length.
[  928.858749][T18071] kvm [18070]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5923
[  928.920311][T18071] kvm [18070]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5923
[  929.017192][T18071] kvm [18070]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5923
[  929.091794][T18071] kvm [18070]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc1 data 0x5923
[  929.129240][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  929.169935][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  929.176587][T18071] kvm [18070]: vcpu0, guest rIP: 0x9133 disabled perfctr wrmsr: 0xc2 data 0x5923
[  929.231679][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  929.258334][T18086] device syzkaller0 entered promiscuous mode
[  929.287140][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  929.310137][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  929.363348][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  929.513571][T18100] loop0: detected capacity change from 0 to 16
[  929.595547][T18100] erofs: (device loop0): mounted with root inode @ nid 36.
[  930.028830][T16870] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  930.317428][T16870] usb 8-1: Using ep0 maxpacket: 8
[  930.455983][T16870] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  930.473194][T16870] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  930.494684][T16870] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  930.515440][T16870] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  930.571897][T16870] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  930.593207][T16870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.714703][T18121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  930.739210][T18121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  930.774879][T18121] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  930.883571][T16870] usb 8-1: usb_control_msg returned -32
[  930.889190][T16870] usbtmc 8-1:16.0: can't read capabilities
[  931.052800][T18117] chnl_net:caif_netlink_parms(): no params data found
[  931.227499][T17653] usb 8-1: USB disconnect, device number 3
[  931.337190][T18117] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.405535][T18117] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.438548][T18117] device bridge_slave_0 entered promiscuous mode
[  931.454018][T18117] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.469515][T18117] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.480130][T18117] device bridge_slave_1 entered promiscuous mode
[  931.588372][T18117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  931.655178][T18117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  931.674234][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3795'.
[  931.683526][T18158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  931.766093][T18158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  931.874609][T18117] team0: Port device team_slave_0 added
[  931.918866][T18117] team0: Port device team_slave_1 added
[  931.993885][T18117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  932.010360][T18117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  932.087718][T18117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  932.118576][T18117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  932.135026][T18117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  932.181514][T18117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  932.276539][T18117] device hsr_slave_0 entered promiscuous mode
[  932.297966][T18117] device hsr_slave_1 entered promiscuous mode
[  932.338450][T18117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  932.367230][T18117] Cannot create hsr debugfs directory
[  932.550370][T11951] Bluetooth: hci4: command 0x0409 tx timeout
[  932.669504][T18117] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  932.743496][T18169] device syzkaller0 left promiscuous mode
[  932.823624][T18117] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  932.939441][T18117] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  933.029595][T18117] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  933.270526][T18117] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  933.324678][T18117] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  933.349901][T18117] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  933.373552][T18117] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  933.617397][T18117] 8021q: adding VLAN 0 to HW filter on device bond0
[  933.674082][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  933.691551][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  933.704023][T18117] 8021q: adding VLAN 0 to HW filter on device team0
[  933.799230][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  933.826808][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  933.846690][ T1223] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.853975][ T1223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  933.951224][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  933.997759][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  934.041198][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  934.096557][T16813] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.103746][T16813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  934.142570][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  934.188053][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  934.235606][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  934.255374][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  934.268705][T18191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  934.277274][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  934.336687][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  934.362843][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  934.417416][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  934.465484][T18117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  934.529611][T18117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  934.571137][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  934.595439][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  934.633968][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  934.644342][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3811'.
[  934.764353][T16869] Bluetooth: hci4: command 0x041b tx timeout
[  934.919507][T18214] kvm_set_msr_common: 5 callbacks suppressed
[  934.919527][T18214] kvm [18213]: vcpu2, guest rIP: 0x9130 disabled perfctr wrmsr: 0xc1 data 0x5
[  935.037740][T18214] kvm [18213]: vcpu2, guest rIP: 0x9130 disabled perfctr wrmsr: 0xc2 data 0x5
[  935.063701][T18117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.108119][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  935.128687][T18214] kvm [18213]: vcpu2, guest rIP: 0x9130 ignored wrmsr: 0x11e data 0x5
[  935.144031][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  935.171524][T18214] kvm [18213]: vcpu2, guest rIP: 0x9130 disabled perfctr wrmsr: 0x186 data 0x5
[  935.198441][T18214] kvm [18213]: vcpu2, guest rIP: 0x9130 disabled perfctr wrmsr: 0x187 data 0x5
[  935.256640][T18214] kvm [18213]: vcpu2, guest rIP: 0x9130 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x5, nop
[  935.554793][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  935.575400][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  935.677981][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  935.701718][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  935.727188][T18117] device veth0_vlan entered promiscuous mode
[  935.734621][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  935.770110][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  935.806823][T18117] device veth1_vlan entered promiscuous mode
[  935.844248][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  935.859496][T16869] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  935.882675][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  935.910877][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  936.019442][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  936.102310][T18117] device veth0_macvtap entered promiscuous mode
[  936.151548][T16869] usb 4-1: Using ep0 maxpacket: 16
[  936.193504][T18117] device veth1_macvtap entered promiscuous mode
[  936.290894][T16869] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  936.322659][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  936.347849][T16813] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  936.363787][T16869] usb 4-1: config 0 interface 0 has no altsetting 0
[  936.423974][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.483572][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.499278][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.509925][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.528130][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.544105][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.555289][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.577687][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.589892][T16869] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[  936.611544][T16869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.613228][T18117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  936.639473][T16869] usb 4-1: Product: syz
[  936.648200][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  936.677595][T16869] usb 4-1: Manufacturer: syz
[  936.693731][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  936.707223][T16869] usb 4-1: SerialNumber: syz
[  936.732930][T16869] usb 4-1: config 0 descriptor??
[  936.740817][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.770667][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.824522][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.865169][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.881038][T18117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.896699][T18117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.918523][T18117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  936.931476][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  936.949743][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  936.991025][T18117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  936.992243][T11955] Bluetooth: hci4: command 0x040f tx timeout
[  937.018958][T18117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  937.034389][T18117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  937.056289][T16869] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  937.061504][T18117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  937.081330][    C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  937.197002][T16869] imon:send_packet: packet tx failed (-71)
[  937.241841][T16869] imon 4-1:0.0: panel buttons/knobs setup failed
[  937.328118][ T4748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  937.342741][ T4748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  937.388239][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  937.413861][T16869] rc_core: IR keymap rc-imon-pad not found
[  937.422283][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  937.431086][T16869] Registered IR keymap rc-empty
[  937.437926][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  937.463570][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  937.481059][T16869] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  937.525896][T16869] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  937.562202][T16869] imon:send_packet: packet tx failed (-71)
[  937.591460][T16869] imon 4-1:0.0: remote input dev register failed
[  937.609926][T16869] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  937.719744][ T4200] Bluetooth: hci4: SCO packet for unknown connection handle 0
[  937.879447][T16869] imon 4-1:0.0: unable to initialize intf0, err 0
[  937.894291][T18306] device syzkaller0 entered promiscuous mode
[  937.900487][T16869] imon:imon_probe: failed to initialize context!
[  937.909038][T16869] imon 4-1:0.0: unable to register, err -19
[  937.920495][T16869] usb 4-1: USB disconnect, device number 2
[  937.995471][T18310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3843'.
[  938.025252][T18310] netem: invalid attributes len -5
[  938.070944][T18310] netem: change failed
[  938.104406][T18314] device syzkaller1 entered promiscuous mode
[  938.321640][T16869] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  938.370645][T18321] 9pnet_virtio: no channels available for device syz
[  938.681802][T18328] netlink: 'syz.7.3851': attribute type 3 has an invalid length.
[  938.760739][T16869] usb 4-1: unable to read config index 0 descriptor/start: -71
[  938.769053][T16869] usb 4-1: can't read configurations, error -71
[  938.915193][T18331] block device autoloading is deprecated and will be removed.
[  939.223171][ T4235] Bluetooth: hci4: command 0x0419 tx timeout
[  939.795590][ T4235] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  940.169568][T17653] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  940.285383][T18374] device syzkaller0 entered promiscuous mode
[  940.294098][ T4235] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  940.309416][ T4235] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  940.342132][ T4235] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  940.352480][ T4235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.365961][ T4235] usb 7-1: config 0 descriptor??
[  940.419281][ T4235] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  940.445931][ T4235] dvb-usb: bulk message failed: -22 (3/0)
[  940.507536][T18380] tipc: Started in network mode
[  940.516037][ T4235] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  940.516944][T18380] tipc: Node identity 020000000000000003, cluster identity 4711
[  940.576078][T17653] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  940.587810][ T4235] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  940.595926][ T4235] usb 7-1: media controller created
[  940.631017][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  940.635949][T17653] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  940.670976][ T4235] dvb-usb: bulk message failed: -22 (6/0)
[  940.687928][ T4235] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  940.695448][T18388] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3873'.
[  940.709416][T17653] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  940.749071][ T4235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13
[  940.757220][T17653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.770981][ T4235] dvb-usb: schedule remote query interval to 150 msecs.
[  940.778180][ T4235] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  940.847525][ T4235] usb 7-1: USB disconnect, device number 3
[  940.853892][T18369] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  941.001849][ T4235] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  941.031063][T11955] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  941.322383][T18405] 9pnet_virtio: no channels available for device syz
[  941.345146][T11955] usb 4-1: Using ep0 maxpacket: 32
[  941.351527][T16869] usb 1-1: USB disconnect, device number 2
[  941.498838][T11955] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  941.532197][T11955] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  941.587720][T11955] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  941.804499][ T4366] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  941.804672][T11955] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.6a
[  941.836474][T11955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.844654][T11955] usb 4-1: Product: syz
[  941.868526][T11955] usb 4-1: Manufacturer: syz
[  941.873265][T11955] usb 4-1: SerialNumber: syz
[  941.945343][T11955] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  941.952991][T11955] imon 4-1:155.0: unable to initialize intf0, err -19
[  941.975375][T11955] imon:imon_probe: failed to initialize context!
[  941.981771][T11955] imon 4-1:155.0: unable to register, err -19
[  942.061213][ T4366] usb 8-1: Using ep0 maxpacket: 16
[  942.200153][ T4366] usb 8-1: config index 0 descriptor too short (expected 65, got 36)
[  942.211972][ T4366] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  942.223157][ T4366] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  942.246650][ T4366] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  942.271187][ T4366] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.318353][ T4366] usb 8-1: config 0 descriptor??
[  942.394167][ T4366] pxrc 8-1:0.0: Could not find endpoint
[  942.403668][ T4366] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  942.614065][ T4366] usb 8-1: USB disconnect, device number 4
[  942.732775][T18455] netlink: 'syz.6.3888': attribute type 11 has an invalid length.
[  943.409781][T16869] usb 4-1: USB disconnect, device number 5
[  943.823904][T18491] Cannot find add_set index 0 as target
[  943.848091][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3904'.
[  944.205537][T18514] veth1: mtu less than device minimum
[  944.257800][T18515] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[  944.264610][T18515] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  944.321480][T18515] vhci_hcd vhci_hcd.0: Device attached
[  944.604285][T17653] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[  944.611956][ T4366] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  944.892778][ T4366] usb 9-1: Using ep0 maxpacket: 32
[  945.021276][ T4366] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  945.050526][ T4366] usb 9-1: config 0 has no interfaces?
[  945.234779][ T4366] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  945.268346][ T4366] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.295168][T18544] binder: BINDER_SET_CONTEXT_MGR already set
[  945.319759][ T4366] usb 9-1: Product: syz
[  945.325155][T18544] binder: 18543:18544 ioctl 4018620d 200000004a80 returned -16
[  945.333839][ T4366] usb 9-1: Manufacturer: syz
[  945.362944][ T4366] usb 9-1: SerialNumber: syz
[  945.392881][ T4366] usb 9-1: config 0 descriptor??
[  945.675299][T18516] vhci_hcd: connection closed
[  945.675860][ T4271] vhci_hcd: stop threads
[  945.676339][ T5210] usb 9-1: USB disconnect, device number 2
[  945.684938][ T4271] vhci_hcd: release socket
[  945.685028][ T4271] vhci_hcd: disconnect device
[  945.759457][T17653] vhci_hcd: vhci_device speed not set
[  945.996026][T18567] binder: 18566:18567 unknown command 0
[  946.012480][T18567] binder: 18566:18567 ioctl c0306201 200000000000 returned -22
[  946.163135][T18569] loop3: detected capacity change from 0 to 512
[  946.234571][T18569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  946.354641][T18571] device veth3 entered promiscuous mode
[  946.366101][T18569] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3928: invalid indirect mapped block 9 (level 0)
[  946.440364][T18569] EXT4-fs (loop3): 1 truncate cleaned up
[  946.486683][T18569] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  947.481823][    C1] vkms_vblank_simulate: vblank timer overrun
[  947.824239][T18611] binder: 18609:18611 ioctl c0306201 200000000080 returned -14
[  947.864251][T18611] binder: 18609:18611 ioctl c0306201 2000000003c0 returned -14
[  948.125080][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3945'.
[  948.162088][T18624] IPVS: Error joining to the multicast group
[  948.585552][T18640] device syzkaller0 entered promiscuous mode
[  948.930648][T18655] 9pnet_virtio: no channels available for device syz
[  949.434423][ T7548] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  949.819229][ T7548] usb 7-1: config 0 has no interfaces?
[  949.824779][ T7548] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  949.859946][ T7548] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.909086][ T7548] usb 7-1: config 0 descriptor??
[  950.385106][ T5210] usb 7-1: USB disconnect, device number 4
[  950.513919][T18714] ubi31: attaching mtd0
[  950.538757][T18714] ubi31: scanning is finished
[  950.555231][T18714] ubi31: empty MTD device detected
[  950.694383][T18714] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  950.715085][T18714] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  950.722878][T18714] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  950.741298][T18714] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  950.759320][T18714] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  950.770239][T18714] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  950.789295][T18714] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2176197373
[  950.821780][T18714] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  950.867891][T18716] ubi31: background thread "ubi_bgt31d" started, PID 18716
[  951.263233][T18732] loop3: detected capacity change from 0 to 7
[  951.275427][T18732] Dev loop3: unable to read RDB block 7
[  951.302797][T18732]  loop3: unable to read partition table
[  951.337916][T18732] loop3: partition table beyond EOD, truncated
[  951.372913][T18732] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  952.031028][T11955] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  952.494340][T11955] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  952.508479][T11955] usb 4-1: config 0 has no interface number 0
[  952.524017][T11955] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  952.789948][T11955] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  952.800620][T11955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.808670][T11955] usb 4-1: Product: syz
[  952.813337][T11955] usb 4-1: Manufacturer: syz
[  952.817952][T11955] usb 4-1: SerialNumber: syz
[  952.825708][T11955] usb 4-1: config 0 descriptor??
[  952.867639][T11955] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  953.121540][ T7548] usb 4-1: USB disconnect, device number 6
[  953.146696][ T7548] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  953.966012][T18811] loop3: detected capacity change from 0 to 8192
[  954.005967][T18811] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  955.082112][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4019'.
[  955.103984][T18844] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  955.761621][T18844] batman_adv: batadv0: Removing interface: batadv_slave_1
[  955.981969][T18883] loop7: detected capacity change from 0 to 128
[  956.185873][T18896] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  956.246595][T13871] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  956.267046][T13871] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  957.579897][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4057'.
[  957.602473][T18940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  957.747049][T18940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  958.119274][T18958] loop8: detected capacity change from 0 to 136
[  958.201757][T18958] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  958.242475][T18962] 9pnet: Insufficient options for proto=fd
[  958.351028][T18962] bond0: option ad_select: unable to set because the bond device is up
[  958.524878][T18944] chnl_net:caif_netlink_parms(): no params data found
[  958.711632][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4069'.
[  958.783732][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4071'.
[  959.024131][T18989] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4071'.
[  959.698530][T18944] bridge0: port 1(bridge_slave_0) entered blocking state
[  959.749934][T18944] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.781057][T18944] device bridge_slave_0 entered promiscuous mode
[  959.896072][ T4366] Bluetooth: hci2: command 0x0409 tx timeout
[  959.953296][T18944] bridge0: port 2(bridge_slave_1) entered blocking state
[  960.119335][T18944] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.338367][T18944] device bridge_slave_1 entered promiscuous mode
[  960.571759][T19015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  960.585379][T19015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  960.673835][T18944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  960.719434][T18944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  960.842535][T18944] team0: Port device team_slave_0 added
[  960.853029][T18944] team0: Port device team_slave_1 added
[  960.876352][T18944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  960.884101][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  960.910108][    C0] vkms_vblank_simulate: vblank timer overrun
[  961.045184][T18944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  961.111084][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4083'.
[  961.144137][T18944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  961.166991][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  961.356674][T18944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  961.439325][T19067] loop8: detected capacity change from 0 to 16
[  961.497228][T19067] erofs: (device loop8): mounted with root inode @ nid 36.
[  961.557697][T18944] device hsr_slave_0 entered promiscuous mode
[  961.598060][T18944] device hsr_slave_1 entered promiscuous mode
[  961.642817][T18944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  961.712609][T18944] Cannot create hsr debugfs directory
[  961.838161][T19085] user requested TSC rate below hardware speed
[  961.875145][T19079] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  961.899491][T19079] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  962.118378][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4101'.
[  962.118903][ T4366] Bluetooth: hci2: command 0x041b tx timeout
[  962.305156][T18944] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  962.327074][T18944] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  962.375453][T18944] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  962.432557][T18944] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  963.457196][T19126] loop6: detected capacity change from 0 to 164
[  964.466871][T17653] Bluetooth: hci2: command 0x040f tx timeout
[  965.477481][T19124] Unsupported NM flag settings (240)
[  965.492752][T19124] overlayfs: unrecognized mount option "/" or missing value
[  965.738442][ T4614] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  965.840828][T18944] 8021q: adding VLAN 0 to HW filter on device bond0
[  965.903719][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4115'.
[  965.952822][T18944] 8021q: adding VLAN 0 to HW filter on device team0
[  966.046596][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  966.064344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  966.199700][ T4614] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.307772][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  966.316543][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  966.348459][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.355640][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  966.416496][ T4614] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.481969][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  966.498711][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  966.541676][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  966.588960][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.596142][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  966.640330][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  966.650529][T17653] Bluetooth: hci2: command 0x0419 tx timeout
[  966.679075][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  966.744938][ T4614] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.820077][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  966.844891][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  966.905885][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  966.938628][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  966.965574][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  967.013592][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  967.056428][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  967.102019][T18944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  967.136886][T18944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  967.160175][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  967.209074][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  967.402035][   T26] audit: type=1326 audit(1779868266.152:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.6.4130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab59b0e59 code=0x7ffc0000
[  967.570334][   T26] audit: type=1326 audit(1779868266.152:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.6.4130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab59b0e59 code=0x7ffc0000
[  967.688458][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  967.696162][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  967.733972][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4131'.
[  967.735710][   T26] audit: type=1326 audit(1779868266.152:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.6.4130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab59b0e59 code=0x7ffc0000
[  967.766201][T18944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.823223][ T4614] tipc: Left network mode
[  967.969170][   T26] audit: type=1326 audit(1779868266.152:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.6.4130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feab597168e code=0x7ffc0000
[  968.105083][   T26] audit: type=1326 audit(1779868266.152:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.6.4130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab59b0e59 code=0x7ffc0000
[  968.136261][   T26] audit: type=1326 audit(1779868266.152:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.6.4130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feab59b0e59 code=0x7ffc0000
[  968.160473][    C0] vkms_vblank_simulate: vblank timer overrun
[  968.391759][   T26] audit: type=1326 audit(1779868266.152:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19192 comm="syz.6.4130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feab59b0e59 code=0x7ffc0000
[  968.696529][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  968.719671][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  968.813829][T18994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  968.833818][T18994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  968.876796][T18944] device veth0_vlan entered promiscuous mode
[  968.922206][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4143'.
[  968.946822][T18994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  968.977064][T18994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  969.007886][T18944] device veth1_vlan entered promiscuous mode
[  969.172205][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  969.225981][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  969.247957][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  969.267372][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  969.306653][T18944] device veth0_macvtap entered promiscuous mode
[  969.360250][T18944] device veth1_macvtap entered promiscuous mode
[  969.405261][T18944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  969.524060][T18944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.534045][T18944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  969.577744][T19289] loop6: detected capacity change from 0 to 1764
[  969.588472][T18944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.598346][T18944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  969.666682][T18944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.698586][T18944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  969.730229][T18944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.761884][T18944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  969.805173][T18944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  969.859659][T18944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  969.872174][T19298] loop8: detected capacity change from 0 to 2048
[  969.894038][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  969.947997][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  969.969181][T19298]  loop8: p2 p3 p7
[  969.980569][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  970.021525][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  970.107282][T18944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  970.132449][T18944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  970.154392][ T3561]  loop8: p2 p3 p7
[  970.165131][T18944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  970.235039][T18944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  970.273623][T18944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  970.292739][T18993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  970.307966][T18993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  970.407827][ T4614] device hsr_slave_0 left promiscuous mode
[  970.434992][ T4614] device hsr_slave_1 left promiscuous mode
[  970.463984][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  970.496168][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0
[  970.561801][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  970.570329][T19320] loop6: detected capacity change from 0 to 128
[  970.598469][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1
[  970.610507][T18395] udevd[18395]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  970.627047][T16652] udevd[16652]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  970.677921][ T4614] device bridge_slave_1 left promiscuous mode
[  970.757760][    C0] vkms_vblank_simulate: vblank timer overrun
[  970.768114][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.784608][T18393] udevd[18393]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  970.838474][T16652] udevd[16652]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  970.971865][ T4614] device bridge_slave_0 left promiscuous mode
[  970.990071][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.006118][ T4614] device veth1_macvtap left promiscuous mode
[  971.014950][ T4614] device veth0_macvtap left promiscuous mode
[  971.023540][ T4614] device veth1_vlan left promiscuous mode
[  971.044854][ T4614] device veth0_vlan left promiscuous mode
[  971.559675][ T4614] team0 (unregistering): Port device team_slave_1 removed
[  971.584201][ T4614] team0 (unregistering): Port device team_slave_0 removed
[  971.601163][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  971.752471][ T4614] bond0 (unregistering): Released all slaves
[  971.843238][T19347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4166'.
[  971.911786][T18944] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  971.932162][T18944] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  971.953732][T18944] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  971.986112][T18944] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  972.431586][T18993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.439447][T18993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.484310][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  972.547408][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.574843][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.623273][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  972.759014][T19377] loop0: detected capacity change from 0 to 512
[  973.191723][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4179'.
[  973.219782][T19399] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  973.232139][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  973.453984][T19396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  973.959440][T19425] page:ffffea000127cf40 refcount:4 mapcount:1 mapping:ffff8880255d9c30 index:0x0 pfn:0x49f3d
[  973.970988][T19425] memcg:ffff8880662f8000
[  973.975248][T19425] aops:shmem_aops ino:849
[  973.979685][T19425] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[  973.989511][T19425] raw: 00fff00000080015 ffffea000113bec8 ffffea0001a0dfc8 ffff8880255d9c30
[  973.998195][T19425] raw: 0000000000000000 0000000000000000 0000000400000000 ffff8880662f8000
[  974.006784][T19425] page dumped because: VM_BUG_ON_PAGE(page_mapped(page))
[  974.013808][T19425] page_owner tracks the page as allocated
[  974.019530][T19425] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 19429, ts 973950142737, free_ts 973886141494
[  974.034406][T19425]  get_page_from_freelist+0x1bbd/0x1ca0
[  974.040080][T19425]  __alloc_pages+0x1ee/0x480
[  974.044806][T19425]  alloc_pages_vma+0x393/0x7c0
[  974.049694][T19425]  shmem_alloc_and_acct_page+0x47f/0xbe0
[  974.055401][T19425]  shmem_getpage_gfp+0x14f4/0x2d40
[  974.060532][T19425]  shmem_read_mapping_page_gfp+0x96/0x100
[  974.066263][T19425]  udmabuf_create+0x895/0x1570
[  974.071637][T19425]  udmabuf_ioctl+0x1f3/0x300
[  974.076398][T19425]  __se_sys_ioctl+0xfa/0x170
[  974.081030][T19425]  do_syscall_64+0x4c/0xa0
[  974.085471][T19425]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  974.091439][T19425] page last free stack trace:
[  974.096119][T19425]  free_unref_page_prepare+0x637/0x6c0
[  974.102130][T19425]  free_unref_page_list+0x119/0x820
[  974.107487][T19425]  release_pages+0x186c/0x1be0
[  974.112355][T19425]  tlb_finish_mmu+0x1b4/0x370
[  974.117045][T19425]  exit_mmap+0x3d0/0x640
[  974.121292][T19425]  __mmput+0x115/0x3b0
[  974.125445][T19425]  exit_mm+0x5f7/0x770
[  974.129733][T19425]  do_exit+0x5a9/0x20c0
[  974.134027][T19425]  do_group_exit+0x12e/0x300
[  974.138632][T19425]  __x64_sys_exit_group+0x3b/0x40
[  974.143671][T19425]  do_syscall_64+0x4c/0xa0
[  974.148107][T19425]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  974.154102][T19425] ------------[ cut here ]------------
[  974.159618][T19425] kernel BUG at mm/filemap.c:166!
[  974.164678][T19425] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  974.170758][T19425] CPU: 1 PID: 19425 Comm: syz.6.4190 Not tainted syzkaller #0
[  974.178217][T19425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  974.188282][T19425] RIP: 0010:unaccount_page_cache_page+0x75c/0x870
[  974.194797][T19425] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 0a 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 0a 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7
[  974.214423][T19425] RSP: 0018:ffffc90002eaf688 EFLAGS: 00010046
[  974.220502][T19425] RAX: 2a08cb26c1d1b800 RBX: 0000000000000000 RCX: 0000000000000000
[  974.228481][T19425] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff520005d5ec4
[  974.236461][T19425] RBP: 1ffffd400024f9e9 R08: ffff8880b912795b R09: fffff520005d5e80
[  974.244441][T19425] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffea000127cf40
[  974.252529][T19425] R13: dffffc0000000000 R14: ffffea000127cf40 R15: ffffea000127cf48
[  974.260651][T19425] FS:  000055555ef78500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  974.269603][T19425] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  974.276292][T19425] CR2: 000000110c40f856 CR3: 0000000066280000 CR4: 00000000003506e0
[  974.284272][T19425] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003
[  974.292369][T19425] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  974.300479][T19425] Call Trace:
[  974.303776][T19425]  <TASK>
[  974.306717][T19425]  __delete_from_page_cache+0xbe/0x6d0
[  974.312210][T19425]  ? _raw_spin_lock_irq+0x86/0xf0
[  974.317247][T19425]  ? lockdep_hardirqs_off+0x70/0x100
[  974.322725][T19425]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  974.329764][T19425]  ? _raw_spin_lock_irq+0xb7/0xf0
[  974.334808][T19425]  ? _raw_spin_lock_irqsave+0x100/0x100
[  974.340371][T19425]  ? page_mapping+0x30e/0x440
[  974.345263][T19425]  delete_from_page_cache+0x121/0x190
[  974.350656][T19425]  truncate_inode_page+0x8d/0xb0
[  974.355606][T19425]  shmem_undo_range+0x53c/0x1930
[  974.360693][T19425]  ? __lock_acquire+0x13bc/0x7d10
[  974.365812][T19425]  ? shmem_truncate_range+0xa0/0xa0
[  974.371037][T19425]  ? do_raw_spin_lock+0x128/0x2f0
[  974.376187][T19425]  ? __rwlock_init+0x140/0x140
[  974.380970][T19425]  shmem_evict_inode+0x220/0xa40
[  974.385925][T19425]  ? inode_wait_for_writeback+0x1df/0x220
[  974.391987][T19425]  ? shmem_free_in_core_inode+0xb0/0xb0
[  974.397569][T19425]  ? do_raw_spin_lock+0x128/0x2f0
[  974.402750][T19425]  ? bit_waitqueue+0x30/0x30
[  974.407432][T19425]  ? do_raw_spin_unlock+0x11d/0x230
[  974.412658][T19425]  ? shmem_free_in_core_inode+0xb0/0xb0
[  974.418339][T19425]  evict+0x4c9/0x8d0
[  974.422390][T19425]  ? proc_nr_inodes+0x320/0x320
[  974.427252][T19425]  ? do_raw_spin_unlock+0x11d/0x230
[  974.432464][T19425]  ? _raw_spin_unlock+0x24/0x40
[  974.437330][T19425]  __dentry_kill+0x431/0x650
[  974.441931][T19425]  dentry_kill+0xb8/0x290
[  974.446289][T19425]  dput+0xd8/0x1a0
[  974.450022][T19425]  __fput+0x5ee/0x930
[  974.454116][T19425]  task_work_run+0x125/0x1a0
[  974.458802][T19425]  exit_to_user_mode_loop+0x10f/0x130
[  974.464348][T19425]  exit_to_user_mode_prepare+0xee/0x180
[  974.469912][T19425]  syscall_exit_to_user_mode+0x16/0x40
[  974.475394][T19425]  do_syscall_64+0x58/0xa0
[  974.479824][T19425]  ? clear_bhb_loop+0x30/0x80
[  974.484746][T19425]  ? clear_bhb_loop+0x30/0x80
[  974.489448][T19425]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  974.495510][T19425] RIP: 0033:0x7feab59b0e59
[  974.500039][T19425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  974.519655][T19425] RSP: 002b:00007ffd92e80048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  974.528213][T19425] RAX: 0000000000000000 RBX: 00007ffd92e80130 RCX: 00007feab59b0e59
[  974.536341][T19425] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  974.544327][T19425] RBP: 00000000000e1bde R08: 0000000000000001 R09: 0000000000000000
[  974.552318][T19425] R10: 0000001b30320000 R11: 0000000000000246 R12: 00007ffd92e80170
[  974.560300][T19425] R13: 00007feab5c29fac R14: 00000000000e1c2d R15: 00007feab5c29fa0
[  974.568291][T19425]  </TASK>
[  974.571338][T19425] Modules linked in:
[  974.575252][T19425] ---[ end trace af436c55098e7420 ]---
[  974.580711][T19425] RIP: 0010:unaccount_page_cache_page+0x75c/0x870
[  974.587147][T19425] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 0a 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 0a 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7
[  974.606860][T19425] RSP: 0018:ffffc90002eaf688 EFLAGS: 00010046
[  974.612946][T19425] RAX: 2a08cb26c1d1b800 RBX: 0000000000000000 RCX: 0000000000000000
[  974.620931][T19425] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff520005d5ec4
[  974.628917][T19425] RBP: 1ffffd400024f9e9 R08: ffff8880b912795b R09: fffff520005d5e80
[  974.636900][T19425] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffea000127cf40
[  974.645101][T19425] R13: dffffc0000000000 R14: ffffea000127cf40 R15: ffffea000127cf48
[  974.653208][T19425] FS:  000055555ef78500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  974.662279][T19425] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  974.668888][T19425] CR2: 000000110c40f856 CR3: 0000000066280000 CR4: 00000000003506e0
[  974.676860][T19425] DR0: 0000000000000001 DR1: 00000000000001f8 DR2: 0000000000000003
[  974.684826][T19425] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  974.692914][T19425] Kernel panic - not syncing: Fatal exception
[  974.699266][T19425] Kernel Offset: disabled
[  974.703705][T19425] Rebooting in 86400 seconds..